SSO on Apache is Apache: not logged in to Ivy but in tomcat?
Hello Ivy-Comunity!
When logged in to Apache (and to Tomcat) the User is not taken by Ivy.
In a testing environment I have the following constellation:
- Linux environment with Ivy 5.1.3 attached to AD
- Apache Server with Kerberos Login attached to the same AD
- Ajp-Connector to Ivy-Tomcat
- A jsp testing Page in the Ivy-Environment (applicationHome on the Application-wf-Page)
So this Page shows me by asking request.getRemoteUser() that this User is logged in: Hans.Tester@TESTENV.LOCAL and a HTTP Session request.getSession().getId(). But getting the Ivy-User by ivySession.getSessionUser() returns null. Except when Logged in manualy the result Hans.Tester for the Ivy-Session.
So why is that? Or how can I make shure, that the Session is taken correctly by ivy?
First guess is, that the username comes with the Environment (TESTENV.LOCAL). If it is the Issue, how to shut that down?
With further investigation I found out more:
- In a Windows-Environment under IIS the UserName of the Tomcat-Session is in this format: TESTENV\Alexis.Suter
- The Ivy-Session is not saved into Tomcat-request. (When only logging in to Ivy)
Thanks in advance!